Pure Matrimony GDPR Product Readiness

The General Data Protection Regulation (GDPR), which goes into effect on May 25, 2018, provides data subjects with an array of privacy rights, which provide individuals with greater transparency into and control over uses of their personal information.

At this point, you may be asking how Pure Matrimony aligns with the privacy rights and where you can learn more about our support to GDPR compliance

Transparency And Accountability

Purpose of the GDPR Obligation

Ensures transparent communication with data subjects regarding the processing of their personal data.

A data controller is exempt from these obligations if it cannot identify which personal data in its possession relates to the relevant data subject (i.e., if personal data is anonymized and cannot be re-identified).

Access And Rectification

Purpose of the GDPR Obligation

Allows data subjects to require a data controller to rectify any errors in their personal data.

Actions taken by Pure Matrimony in compliance with GDPR for You

Pure Matrimony administrators and data subjects have access to their profiles to amend inaccuracies.

Exceptions to the GDPR Obligation

Provision of this right to a data subject should not adversely affect an organization’s intellectual property (i.e., giving access to a data subject should not require disclosure of trade secrets).

Right To Be Forgotten

Purpose of the GDPR Obligation

Provide data subjects with the right to delete their personal data if the continued processing is not justified.

For example, you may need to delete your customer’s personal data to comply with your GDPR obligations.

Actions taken by Pure Matrimony in compliance with GDPR for You

Pure Matrimony provides data subjects with the option to deactivate their accounts and request Pure Matrimony administrators to depersonalize their data.

Exceptions to the GDPR Obligation

A company is not required to delete data, except when one of the following reasons is present:

·The personal data is no longer needed in relation to the purposes for which it was collected or otherwise processed.

·The data subject withdraws consent, and there are no other legal grounds for processing.

·The data subject objects to processing, and there are no overriding legitimate grounds for processing.

·The personal data has been unlawfully processed.

·The personal data has to be erased for compliance with a legal obligation.

·The personal data has been collected in relation to the offer of information society services to a minor under 16 years old.

Restriction Processing

Purpose of the GDPR obligation

Provide data subjects the right to limit the purposes for which the data controller can process personal data.

Actions taken by Pure Matrimony in compliance with GDPR for You

Pure Matrimony has documented and implemented internal mechanisms for limiting the processing of personal data to only certain specified uses relating to Pure Matrimony products and services. Functionality is currently available to suspend/unsuspend data subjects.

Pure Matrimony can also export and retain data while processing has ceased.

Exceptions to the GDPR Obligation

The requirement to restrict processing generally applies under the same circumstances as the right to be forgotten and/or when the following circumstances exist:

· The accuracy of the personal data is contested (and only for as long as it takes to verify that accuracy).

· The processing is unlawful, and the data subject requests restriction (and the data subject is not exercising the right to be forgotten).

·The data controller no longer needs the personal data for the original purpose but still requires it to establish, exercise, or defend a legal right.

·Verification of an overriding ground is pending (in the context of a deletion request).

Data Portability

Purpose of the GDPR Obligation

Provide data subjects with the right to transfer their personal data between data controllers.

Actions taken by Pure Matrimony in compliance with GDPR for You

Pure Matrimony has developed and implemented mechanisms to enable its data subjects to export profile data.

Exceptions to the GDPR Obligation

Inferred and derived personal data (e.g., a message response rate, personality test report) are not included because they are not “provided by the data subject.”

Data controllers are not obligated to retain personal data simply for the purposes of providing a copy of the personal data pursuant to a potential data subject request.

Objection To Processing

Purpose of the GDPR Obligation

Provide data subjects with the right to Cease processing personal data based upon specific data subject requests

Actions taken by Pure Matrimony in compliance with GDPR for You

Pure Matrimony has documented and implemented internal mechanisms to:

·Cease processing personal data based upon specific data subject requests and the particular reasoning for objecting to processing.